Fix #532 permission issue when re-add user

ubc · Oct 5, 2016 · 1fc3c5f · 1fc3c5f
1 parent 6fa2963
commit 1fc3c5f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/controllers/users_controller.php b/app/controllers/users_controller.php
@@ -666,7 +666,7 @@ public function readd($username, $courseId = null)
         $url = '/users';
         $url .= $courseId ? '/goToClassList/'.$courseId : '';
 
-        if ($userRole <= $roleId || !in_array($userRole, array(4, 5))) {
+        if ($roleId != 1 && ($userRole <= $roleId || !in_array($userRole, array(3, 4, 5)))) {
             $this->Session->setFlash(__('Error: You do not have permission to readd this user.', true));
             $this->redirect($url);
             return;